Clicknify Schools

Data Processing Agreement

Last updated: 22 July 2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service between the School ("Data Fiduciary") and Clicknify ("Data Processor") governing the processing of personal data of students, parents, and staff.

1 · Roles

The School is the Data Fiduciary. Clicknify is the Data Processor acting on documented instructions from the School.

2 · Nature and purpose of processing

  • Operating the Clicknify Schools web application on behalf of the School.
  • Storing academic records, attendance, fee receipts, admissions, TCs, gate passes.
  • Facilitating communication between the School and parents.
  • Providing support and troubleshooting when requested.

3 · Categories of data + subjects

Personal data of students (name, DOB, admission number, marks, attendance, health data if entered), parents (name, phone, email, payment method), and staff (name, role, email, phone).

4 · Sub-processors

See Privacy Policy §5. We give 30 days notice before adding a new sub-processor.

5 · Security measures

  • TLS 1.2+ in transit.
  • Postgres Row-Level Security (RLS) enforcing tenant isolation.
  • Encryption at rest for all Supabase-managed storage.
  • Least-privilege service accounts, no shared credentials.
  • audit_logs of every write with before/after snapshots.
  • Daily automated backups (Supabase native).

6 · Breach notification

We will notify the School within 72 hours of becoming aware of a personal data breach, providing all information the School needs to comply with its own DPDPA notification obligations to the Data Protection Board of India.

7 · Data subject rights

Requests from students or parents should be directed to the School. We will support the School in responding within the timelines DPDPA requires.

8 · Return / deletion

On termination, we will (at the School's choice) return the data as CSV/XLSX within 30 days, then delete it from active systems within a further 30 days. Backup deletion follows the standard 90-day rotation cycle.

9 · Audit

The School may audit our security controls once per year at its cost with 30 days notice. We share SOC 2 / ISO 27001 attestations when they become available.

10 · Governing law

Laws of India. Courts of Lucknow, Uttar Pradesh.